$ rpki-client -vvf repo-rpki.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.mft File: 3B2608378F03DCAD9A64B7DF68B52F2CBC643525.mft (raw, json) Hash identifier: MYexRqxMWmREtB21AU32r26W8J5NPGwNCz5O0hH9MOg= Subject key identifier: 82:5C:67:5A:87:51:DA:E4:DA:BA:B6:43:53:BB:68:BD:8B:35:B6:1F Authority key identifier: 3B:26:08:37:8F:03:DC:AD:9A:64:B7:DF:68:B5:2F:2C:BC:64:35:25 Certificate issuer: /CN=3B2608378F03DCAD9A64B7DF68B52F2CBC643525 Certificate serial: 29FB6FC04E00B5A1E34E2F5DA206E1089D9525D8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.mft Manifest number: 03F7 Signing time: Wed 25 Mar 2026 05:01:20 +0000 Manifest this update: Wed 25 Mar 2026 04:56:20 +0000 Manifest next update: Sat 28 Mar 2026 14:26:20 +0000 Files and hashes: 1: 3B2608378F03DCAD9A64B7DF68B52F2CBC643525.crl (hash: 1ULpjfm89y6AmyAlnZmZPouXfdMJ0KU0usjMx+k0SP8=) 2: 3130332e3136372e32302e302f32342d3234203d3e20313431393730.roa (hash: 6/s2KAnQCmxKlD3EU03jhWpXfqnY8gSv1EFXD611Zco=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.crl rsync://repo-rpki.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 14:26:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:fb:6f:c0:4e:00:b5:a1:e3:4e:2f:5d:a2:06:e1:08:9d:95:25:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B2608378F03DCAD9A64B7DF68B52F2CBC643525 Validity Not Before: Mar 25 04:56:20 2026 GMT Not After : Mar 28 14:26:20 2026 GMT Subject: CN=825C675A8751DAE4DABAB64353BB68BD8B35B61F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e7:da:40:0f:84:61:f0:39:f0:12:be:d3:11: 66:07:e1:66:dc:c0:ca:ec:67:7c:50:93:5b:07:8c: 6e:ba:a7:a6:46:73:f6:78:97:d4:cf:e5:de:5b:02: 06:91:c6:a3:8e:7c:6e:70:aa:67:28:b1:fd:e9:51: 93:f9:aa:92:2a:1b:bf:47:0c:d6:a1:79:d7:fb:42: cc:db:40:f2:e3:08:44:5f:5e:8b:36:fc:11:3f:b9: 56:fe:b3:71:11:cc:28:32:1d:fb:72:9b:79:c8:06: 3f:89:04:1d:a3:fc:be:3c:ca:16:32:40:5e:f8:d6: 81:c4:a4:56:5d:a7:a9:6a:5b:c4:10:54:a8:2c:f7: d8:a7:67:81:bd:15:d5:79:12:3d:d6:af:32:e7:88: 70:c7:73:eb:2b:e0:a7:f3:82:07:80:ff:a3:3a:7f: 29:8f:61:fa:a8:8e:39:8b:35:39:4b:8f:11:d7:af: d4:8c:a4:c1:99:ec:14:e3:43:ad:1e:23:1f:b0:13: 23:ed:50:28:20:06:e0:44:7b:f5:6b:b2:87:9f:27: 3d:4e:fa:62:1a:0c:de:36:f1:05:a9:87:15:3c:e0: 98:0f:09:f7:29:f7:7f:5d:a8:ae:87:e7:03:4e:e5: 1a:7c:73:bf:63:7d:17:c9:ac:54:55:ad:3c:97:3f: 70:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:5C:67:5A:87:51:DA:E4:DA:BA:B6:43:53:BB:68:BD:8B:35:B6:1F X509v3 Authority Key Identifier: keyid:3B:26:08:37:8F:03:DC:AD:9A:64:B7:DF:68:B5:2F:2C:BC:64:35:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:72:34:51:bf:a1:a9:00:55:d6:2c:1a:e6:77:0b:5c:0d:67: dc:63:37:63:90:0a:49:3e:50:07:e1:62:64:fa:e4:4d:e3:3b: 59:14:42:3b:d0:a8:57:b5:ef:2f:fa:c0:9a:72:b4:39:3a:6a: 18:d1:8d:cc:77:cc:15:f1:0c:93:e6:3d:e7:44:17:88:68:11: 2b:4e:62:29:d2:eb:c9:ee:90:32:56:a5:00:35:93:dd:e5:91: db:41:35:f9:1f:4c:d3:8e:ff:d9:61:0a:34:a3:48:39:e0:1b: 4f:aa:45:78:6a:7a:64:73:6c:dd:96:e3:b3:c7:27:1e:a3:8e: 09:dc:3e:eb:9d:fc:ff:66:a1:af:00:cb:bf:0e:f9:d7:a3:20: 3f:a0:e7:43:e5:e7:b3:21:c6:5a:49:5e:8b:2c:dc:9a:1b:4e: db:ec:f9:fa:fc:0f:ba:97:a0:f6:60:3c:c1:85:38:73:5c:9f: 9a:27:d8:17:f0:70:b2:98:62:50:04:26:39:14:94:ab:af:a6: de:41:3e:dd:dd:db:4a:1b:f5:60:f4:38:7a:bf:aa:39:7c:2b: f3:dc:ed:d2:e9:43:3a:4b:b4:16:2d:b9:15:a0:e6:3c:df:c0: 07:75:ee:9d:e0:0a:9a:65:d2:97:7d:7b:03:74:59:70:22:14: 1e:33:eb:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKftvwE4AtaHjTi9dogbhCJ2VJdgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0IyNjA4Mzc4RjAzRENBRDlBNjRCN0RGNjhCNTJGMkNC QzY0MzUyNTAeFw0yNjAzMjUwNDU2MjBaFw0yNjAzMjgxNDI2MjBaMDMxMTAvBgNV BAMTKDgyNUM2NzVBODc1MURBRTREQUJBQjY0MzUzQkI2OEJEOEIzNUI2MUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU59pAD4Rh8DnwEr7TEWYH4Wbc wMrsZ3xQk1sHjG66p6ZGc/Z4l9TP5d5bAgaRxqOOfG5wqmcosf3pUZP5qpIqG79H DNahedf7QszbQPLjCERfXos2/BE/uVb+s3ERzCgyHftym3nIBj+JBB2j/L48yhYy QF741oHEpFZdp6lqW8QQVKgs99inZ4G9FdV5Ej3WrzLniHDHc+sr4KfzggeA/6M6 fymPYfqojjmLNTlLjxHXr9SMpMGZ7BTjQ60eIx+wEyPtUCggBuBEe/VrsoefJz1O +mIaDN428QWphxU84JgPCfcp939dqK6H5wNO5Rp8c79jfRfJrFRVrTyXP3D7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUglxnWodR2uTaurZDU7tovYs1th8wHwYDVR0j BBgwFoAUOyYIN48D3K2aZLffaLUvLLxkNSUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m Zjc2Yjc3My00MDVmLTQ1OGYtOWI4OC04NTIwOTUxNzNmMTYvMC8zQjI2MDgzNzhG MDNEQ0FEOUE2NEI3REY2OEI1MkYyQ0JDNjQzNTI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0IyNjA4Mzc4RjAzRENBRDlBNjRCN0RGNjhCNTJGMkNCQzY0 MzUyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmY3NmI3NzMtNDA1Zi00NThmLTli ODgtODUyMDk1MTczZjE2LzAvM0IyNjA4Mzc4RjAzRENBRDlBNjRCN0RGNjhCNTJG MkNCQzY0MzUyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFJyNFG/oakAVdYsGuZ3C1wNZ9xjN2OQCkk+ UAfhYmT65E3jO1kUQjvQqFe17y/6wJpytDk6ahjRjcx3zBXxDJPmPedEF4hoEStO YinS68nukDJWpQA1k93lkdtBNfkfTNOO/9lhCjSjSDngG0+qRXhqemRzbN2W47PH Jx6jjgncPuud/P9moa8Ay78O+dejID+g50Pl57MhxlpJXoss3JobTtvs+fr8D7qX oPZgPMGFOHNcn5on2BfwcLKYYlAEJjkUlKuvpt5BPt3d20ob9WD0OHq/qjl8K/Pc 7dLpQzpLtBYtuRWg5jzfwAd17p3gCppl0pd9ewN0WXAiFB4z66g= -----END CERTIFICATE-----Generated at Thu Mar 26 12:25:30 2026 by rpki-client